Reject Unauthoized MAC Address

Is there a clear way to allow wired Internet and LAN access through my RVS-4000, and reject all other computers, using MAC addresses?

I have found lots of questions relating to this type of issue, but couldn't find the definitive answer. MAC-based Internet Access Policy Lists don't work, and because DHCP is enabled, IP-based ACL isn't feasible.

I need to authorize about 30 MAC addresses, and deny access through the router to everyone else.